CVE-2002-1449: Frederic Tyndiuk Eupload

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt.

Affected products

• Frederic Tyndiuk Eupload: version 1.0 only

Published 2002-07-31. Last modified 2026-06-16.